EXAM QUICK REFERENCE
Section A builds breadth; Section B tests whether you can carry algorithms and security reasoning through to the end. Sixteen chapters separate shared concepts from section-specific solving moves.
Follows the current IPA FE Syllabus v9.2 and Sections A/B; excludes the proposed 2027 format.
Question practice is open. These resources are available without signing in.
QUICK REFERENCE
Showing 12 items
擬似言語
Read language-independent notation as an algorithm under the execution rules given in the item.
Mark inputs, outputs, and initial values.
Mark assignments, branches, and loop ranges.
Update variables strictly in execution order.
Confirm inputs, outputs, and assignment direction before tracing line by line.
トレース表
Record changing variables and conditions at each execution step.
Create columns for key variables and return values.
Record new values after each executed line.
Verify branch choices and loop exit conditions.
Create columns only for values that change so the table stays usable.
境界条件
Check minima, maxima, empty cases, and single elements where off-by-one errors occur.
List minimum, maximum, empty, and single-element inputs.
Write out the first and final loop iterations.
Compare the effect of strict and inclusive bounds.
When inequalities or array indexes appear, write the first and last concrete values.
再帰呼出し
Follow arguments and return values into the base case and back through each call.
Mark the base case and its return value.
Record arguments for every call level.
Compute return values from the deepest call outward.
Find the base case before expanding calls.
データ構造の選択
Choose a data structure from its required insertion, deletion, search, and access behavior.
List the operations the item requires.
Compare arrays, lists, stacks, queues, and trees.
Trace one actual insertion or deletion.
Verify operation cost and resulting state instead of relying on the structure name.
計算量の見積り
Estimate time or space growth from loop counts, input reduction, and dominant operations.
Count nested loop levels.
Check whether the input halves each iteration.
Keep the dominant growth term.
Find the input-dependent part before dropping constants and lower-order terms.
資産・脅威・脆弱性・対策
Separate the protected asset, possible threat, exploitable weakness, and risk-reducing control.
List business assets and security objectives.
Pair threats with their corresponding vulnerabilities.
Verify that the control reduces the stated risk.
Each control must answer which concrete risk it reduces.
権限表
Map users or roles against resources and allowed actions to assess permissions.
Put subjects in rows and resources in columns.
Fill in allowed actions such as read, write, and execute.
Check excessive privilege and separation-of-duties conflicts.
Use least privilege to find both excessive access and missing required access.
ログと時系列
Order accounts, addresses, devices, and events by time to reconstruct what happened.
Normalize time zones and sort timestamps.
Link accounts, IPs, sessions, and device identifiers.
Record facts and inferences separately.
Treat logged events as facts and unsupported claims as inferences.
攻撃経路
Trace an attack through entry, lateral movement, privilege escalation, and objective.
Identify the initial entry point and trust boundary.
Mark lateral movement and privilege escalation.
Match preventive or detective controls to each stage.
Match controls to attack stages instead of choosing one universal measure.
暗号技術の選択
Choose cryptographic techniques from goals such as confidentiality, integrity, authentication, and non-repudiation.
Mark the required security property.
Compare symmetric keys, public keys, hashes, and signatures.
Verify key ownership and verification direction.
Set the security objective before checking key ownership and who can verify.
インシデント対応
Handle incidents through containment, evidence preservation, eradication, recovery, and review.
Contain impact and preserve evidence first.
Eradicate the cause before restoring service.
Review root cause and implement recurrence prevention.
Urgent recovery must not destroy logs and evidence needed for investigation.
